fwupd / firmware-lenovo

Missing firmware for Lenovo Thinkpad hardware
121 stars 4 forks source link

Lenovo ThinkPad L15 Gen 4 - cannot update "System Firmware" and "Embedded Controller" #463

Open realsobek opened 2 months ago

realsobek commented 2 months ago

On a Lenovo notebook 21H3002EGE "L15 Gen 4 (Type 21H3, 21H4) Laptop (ThinkPad) - Type 21H3" with Intel CPU running Fedora 40 Workstation fwupdmgr updated some devices' firmware - I do not remember the details - but fails to update:

To no avail I tried:

Reinstalling the notebook is possible. A few more of these notebooks ought to be available if special testing is needed. Thank you for your help in advance.

I checked other issues for required debug information. I use the Slash command Details in order to hide the details. I use the pre tag instead of p tag for formatting.

# fwupdmgr --version
compile   org.freedesktop.fwupd         1.9.23
compile   com.hughsie.libxmlb           0.3.19
compile   org.freedesktop.Passim        0.1.7
compile   com.hughsie.libjcat           0.2.1
runtime   org.freedesktop.fwupd-efi     1.6
compile   org.freedesktop.gusb          0.4.9
runtime   com.hughsie.libxmlb           0.3.19
runtime   org.freedesktop.Passim        0.1.7
runtime   org.freedesktop.gusb          0.4.9
runtime   com.hughsie.libjcat           0.2.1
runtime   org.kernel                    6.10.6-200.fc40.x86_64
runtime   org.freedesktop.fwupd         1.9.23
# fwupdmgr get-devices --show-all-devices
LENOVO 21H3002EGE
│
├─ELAN067D:00 04F3:3209:
│     Device ID:          5080849fbc31194136d5a46bbc31fed3cf824d42
│     Summary:            Touchpad
│     Current version:    0x0005
│     Bootloader Version: 0x0003
│     Vendor:             ELAN Microelectronics (HIDRAW:0x04F3)
│     GUIDs:              38897f13-3a41-5b8a-9cc8-9370a2b41291 ← HIDRAW\VEN_04F3&DEV_3209
│                         4b69bffd-d456-54ae-baee-e11b517fa3bd ← HIDRAW\VEN_04F3&DEV_3209&MOD_0037
│                         3313b7ba-c61b-5183-a9c4-3411cc892998 ← ELANTP\ICTYPE_14&MOD_0037
│                         a97baf40-d178-5cf6-81e6-874542d698e2 ← ELANTP\ICTYPE_14&MOD_0037&DRIVER_HID
│     Device Flags:       • Internal device
│                         • Updatable
│   
├─Unknown Device:
│     Device ID:          6b5a06645e27c4e94b6e67d5185c46d11ec9ad67
│     GUID:               c96751f4-16e8-59ea-975d-69d3dac88d7d ← GPIO\ID_INTC1055:00
│   
├─13th Gen Intel Core™ i7-1355U:
│     Device ID:          4bde70ba4e39b28f9eab1628f9dd6e6244c03027
│     Current version:    0x00004121
│     Vendor:             Intel
│     GUIDs:              c3f97ae6-7da2-54cc-ad26-3225f9517203 ← CPUID\PRO_0&FAM_06&MOD_BA
│                         cd7d026a-65a8-597d-a73f-b856af9dc9e2 ← CPUID\PRO_0&FAM_06&MOD_BA&STP_3
│     Device Flags:       • Internal device
│   
├─EM05-G:
│     Device ID:          02861494e3c701c896953cd442bd2f1ad867e1eb
│     Summary:            Mobile broadband device
│     Current version:    EM05GFAR07A07M1G_01.002.01.002
│     Vendor:             Quectel (USB:0x2C7C)
│     GUID:               0322d845-8497-5cbe-bfd5-2c2a6c9ea129 ← USB\VID_2C7C&PID_030A&REV_0200
│     Device Flags:       • Updatable
│                         • System requires external power source
│                         • Unsigned Payload
│   
├─Embedded Controller:
│     Device ID:          bdabeb256aff8415c3fddae68632a65269bb3f55
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    0.1.9
│     Minimum Version:    0.1.9
│     Vendor:             Lenovo (DMI:LENOVO)
│     Update State:       Success
│     GUID:               5c0afb70-bd0a-4dd4-9a4c-d216544288d0
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─Fingerprint Sensor:
│     Device ID:          aa4b7bf130da693bbf1a8a785ad830190788233b
│     Summary:            Match-On-Chip fingerprint sensor
│     Current version:    01000352
│     Vendor:             Goodix (USB:0x27C6)
│     Install Duration:   10 seconds
│     Serial Number:      UID58D0A81C_XXXX_MOC_B0
│     GUID:               14450e82-8667-54c3-98e1-098d8c6dc3b8 ← USB\VID_27C6&PID_6594
│     Device Flags:       • Updatable
│                         • Device can recover flash failures
│                         • Signed Payload
│   
├─Integrated Camera:
│     Device ID:          54dda0fbfd5ac0dee5efc0ec4baefc9190d666ac
│     Current version:    75.20
│     Vendor:             Chicony Electronics Co.,Ltd. (USB:0x04F2)
│     Serial Number:      0001
│     GUID:               bcd2c020-e315-55aa-b7e1-7d2d7108037e ← USB\VID_04F2&PID_B74F
│     Device Flags:       • Updatable
│   
├─Intel Management Engine:
│     Device ID:          3c2b93353e5679f5e929fdf9ef2a1c82f311f03f
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1.25.2124
│     Vendor:             Lenovo (DMI:LENOVO)
│     Update State:       Success
│     GUID:               23192307-d667-4bdf-af1a-6059db171246
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─KBG5AZNT512G LA KIOXIA:
│     Device ID:          03281da317dccd2b18de2bd1cc70a782df40ed7e
│     Summary:            NVM Express solid state drive
│     Current version:    1109ANLA
│     Vendor:             KIOXIA Corporation (NVME:0x1E0F)
│     Serial Number:      73GPD1LMQAWU
│     GUIDs:              6cefd2de-46a3-5fb7-acb1-25ef14bec6de ← NVME\VEN_1E0F&DEV_000C
│                         52a1c489-1299-5fa5-a97f-384dde8c5fa2 ← NVME\VEN_1E0F&DEV_000C&SUBSYS_1E0F0001
│                         fb9f301e-081f-5364-b90d-a90eee931c1b ← KBG5AZNT512G LA KIOXIA
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Signed Payload
│   
├─NV156FHM-N4N:
│     Device ID:          aec1a869eb0df71b7cea6b3ac71d39b830faf164
│     GUID:               61c89a6b-03e6-505e-9a64-9cf8b651e136 ← DRM\VEN_BOE&DEV_085B
│     Device Flags:       • Internal device
│   
├─Raptor Lake-P [UHD Graphics]:
│     Device ID:          5792b48846ce271fab11c4a545f7a3df0d36e00a
│     Current version:    04
│     Vendor:             Intel Corporation (PCI:0x8086)
│     GUIDs:              c9b272c3-230b-5f50-be05-4cf4374d148b ← PCI\VEN_8086&DEV_A721
│                         58907901-6efb-5bd9-9624-62e7cad0a1fa ← PCI\VEN_8086&DEV_A721&SUBSYS_17AA50BE
│     Device Flags:       • Internal device
│                         • Cryptographic hash verification is available
│   
├─System Firmware:
│ │   Device ID:          cdf9504993efe69929e860d15cf4b5edfe51012b
│ │   Summary:            UEFI System Resource Table device (updated via NVRAM)
│ │   Current version:    0.1.12
│ │   Vendor:             Lenovo (DMI:LENOVO)
│ │   Update State:       Success
│ │   GUID:               96f43f55-bce3-4463-94a5-4d7954b67772
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • System requires external power source
│ │                       • Supported on remote server
│ │                       • Needs a reboot after installation
│ │                       • Cryptographic hash verification is available
│ │                       • Device is usable for the duration of the update
│ │   Device Requests:    • Message
│ │ 
│ ├─BootGuard Configuration:
│ │     Device ID:        b0d4430dfa6bde9f0c22680df36dbc8c15c80753
│ │     Current version:  01
│ │     Vendor:           Intel Corporation (MEI:0x8086)
│ │     GUIDs:            dd17041c-09ea-4b17-a271-5b989867ec65
│ │                       fccad2fe-62ae-5879-b7a9-4ead7bce50f4 ← MEI\VEN_8086&DEV_51E0
│ │                       9ac155d9-755b-511e-a10b-b06d510bf5e0 ← MEI\VEN_8086&DEV_51E0&SUBSYS_17AA50BD
│ │     Device Flags:     • Internal device
│ │   
│ └─UEFI dbx:
│       Device ID:        362301da643102b9f38477387e2193e57abaa590
│       Summary:          UEFI revocation database
│       Current version:  371
│       Minimum Version:  371
│       Vendor:           UEFI:Linux Foundation
│       Install Duration: 1 second
│       GUIDs:            5971a208-da00-5fce-b5f5-1234342f9cf7 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649&ARCH_X64
│                         f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64
│       Device Flags:     • Internal device
│                         • Updatable
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Only version upgrades are allowed
│                         • Signed Payload
│     
├─TPM:
│     Device ID:          c6a80ac3a22083423992a3cb15018989f37834d6
│     Current version:    7.2.3.1
│     Vendor:             Nuvoton Technology (TPM:NTC)
│     GUIDs:              fac1c8f3-73c8-5cd6-8330-07a3690b5140 ← TPM\VEN_NTC&DEV_0000
│                         bf68887b-e3d9-5572-9a02-0d34979502c7 ← TPM\VEN_NTC&MOD_NPCT75x"!"8rls
│                         e9ccc1dc-960a-5e09-afe9-e59a904b776d ← TPM\VEN_NTC&DEV_0000&VER_2.0
│                         bc8b2f06-5f89-5b3a-bc74-976e0329f53b ← TPM\VEN_NTC&MOD_NPCT75x"!"8rls&VER_2.0
│     Device Flags:       • Internal device
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device can recover flash failures
│                         • Full disk encryption secrets may be invalidated when updating
│                         • Signed Payload
│   
├─UEFI Device Firmware:
│     Device ID:          1bb50e5e7be06e35cb540dbf97391beef294c4b8
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    0
│     Minimum Version:    15
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               f8637dbe-5762-0000-873a-910aa71c49e4
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          81568164782039dbd4a74856cacb9800f408d44e
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    70159
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               4e88068b-41b2-4e05-893c-db0b43f7d348
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          f7d8680210f5543c047c478c1a07479e58c6afc5
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    18417740
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               d8939f29-dc79-40e9-a35d-8d133440736f
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          89edd1f802189f8f8d3528a18ee99fb0528607cf
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    16777225
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               1b80ddcc-6c04-485a-a26e-0baa2be11938
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          768bf9e45007363bc0549aba7ffaec49fc18cdd8
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               04cb082c-77e9-4fd8-8832-94e0bdd2dfce
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          4d74c5eb1f87bc21ee61f29809221c4adef8a8ea
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               f2a672a0-360b-4c74-91f8-b1424ee68133
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          793edc5c44d1fb3b0921337fc3de03d50a857f67
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    117572353
│     Minimum Version:    117572353
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               5d712b6d-4486-4119-a3cc-a7bb741bb19b
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          7dccda75b1f76a97e675b08e7e0f8ab9924ad9ce
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               69585d92-b50a-4ad7-b265-2eb1ae066574
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          f905a7bd8805851b14be474d006372f37cc9342d
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               76ca0ad8-4a14-4389-b7e5-fd88791762ad
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          7e6427fb78fdb31553c3589b14cf9a40bd2e1f2e
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               626d93db-2c42-48c3-915a-71f968a81b04
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          cef254ddb406e77ace86f4cd92e2a7db5aa308fc
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               86a885ee-d71e-2ed6-0fc1-9d6ccc9677eb
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          6f0c4a0cc2cd035c45fece35226e4aaafc449cd5
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    117572353
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               0eb9bda9-3010-493a-a6a8-b5e80eddf870
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          2c8ac8658d3e6efec9eab49eef330a61d9929111
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    262144
│     Minimum Version:    57374
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               09f77c9f-1c5d-4616-bafb-bbb19f557480
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
├─UEFI Device Firmware:
│     Device ID:          01c5e7f374474c6eb307b1399d357e3216f46e15
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    5
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               3aab9e4d-1502-438a-a488-f07ad942306a
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
└─UEFI Platform Key:
      Device ID:          6924110cde4fa051bfdc600a60620dc7aa9d3c6a
      Summary:            Lenovo Ltd. PK CA 2012
      Vendor:             Lenovo Ltd.
      GUID:               71599d14-9b31-5270-b3bd-74c494585820 ← UEFI\CRT_9AEF2123F4DE7C19AFABD909BB2C8CAC4411E07E
# efibootmgr -v
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0000,001D,001E,001F,0020,0021,0022,0023,0024,0025,0002
Boot0000* Fedora    HD(1,GPT,569dd1f3-186e-44c7-ad68-f23f7d57c255,0x800,0x12c000)/\EFI\fedora\shimx64.efi
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 c0 12 00 00 00 00 00 f3 d1 9d 56 6e 18 c7 44 ad 68 f2 3f 7d 57 c2 55 02 02 / 04 04 34 00 5c 00 45 00 46 00 49 00 5c 00 66 00 65 00 64 00 6f 00 72 00 61 00 5c 00 73 00 68 00 69 00 6d 00 78 00 36 00 34 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00
Boot0001* Windows Boot Manager  HD(1,GPT,b1710260-d3ee-4809-b5d2-b8fb4627968c,0x800,0x82000)/\EFI\Microsoft\Boot\bootmgfw.efi57494e444f5753000100000088000000780000004200430044004f0042004a004500430054003d007b00390064006500610038003600320063002d0035006300640064002d0034006500370030002d0061006300630031002d006600330032006200330034003400640034003700390035007d00000000000100000010000000040000007fff0400
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 20 08 00 00 00 00 00 60 02 71 b1 ee d3 09 48 b5 d2 b8 fb 46 27 96 8c 02 02 / 04 04 46 00 5c 00 45 00 46 00 49 00 5c 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 5c 00 42 00 6f 00 6f 00 74 00 5c 00 62 00 6f 00 6f 00 74 00 6d 00 67 00 66 00 77 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00
    data: 57 49 4e 44 4f 57 53 00 01 00 00 00 88 00 00 00 78 00 00 00 42 00 43 00 44 00 4f 00 42 00 4a 00 45 00 43 00 54 00 3d 00 7b 00 39 00 64 00 65 00 61 00 38 00 36 00 32 00 63 00 2d 00 35 00 63 00 64 00 64 00 2d 00 34 00 65 00 37 00 30 00 2d 00 61 00 63 00 63 00 31 00 2d 00 66 00 33 00 32 00 62 00 33 00 34 00 34 00 64 00 34 00 37 00 39 00 35 00 7d 00 00 00 00 00 01 00 00 00 10 00 00 00 04 00 00 00 7f ff 04 00
Boot0002* Linux-Firmware-Updater    HD(1,GPT,569dd1f3-186e-44c7-ad68-f23f7d57c255,0x800,0x12c000)/\EFI\fedora\fwupdx64.efi
      dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 c0 12 00 00 00 00 00 f3 d1 9d 56 6e 18 c7 44 ad 68 f2 3f 7d 57 c2 55 02 02 / 04 04 36 00 5c 00 45 00 46 00 49 00 5c 00 66 00 65 00 64 00 6f 00 72 00 61 00 5c 00 66 00 77 00 75 00 70 00 64 00 78 00 36 00 34 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00
Boot0010  Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9)
      dp: 04 06 14 00 66 8b 1c 72 6c 42 86 4e 8e 99 34 57 c4 6a b0 b9 / 7f ff 04 00
Boot0011  Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850)
      dp: 04 06 14 00 2d 76 6a 12 58 57 ca 4f 85 31 20 1a 7f 57 f8 50 / 7f ff 04 00
Boot0012  Diagnostic Splash Screen  FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380)
      dp: 04 06 14 00 a6 d9 d8 a7 b0 6a eb 4a ad 9d 16 3e 59 a7 a3 80 / 7f ff 04 00
Boot0013  Lenovo Diagnostics    FvFile(3f7e615b-0d45-4f80-88dc-26b234958560)
      dp: 04 06 14 00 5b 61 7e 3f 45 0d 80 4f 88 dc 26 b2 34 95 85 60 / 7f ff 04 00
Boot0014  Asset Information FvFile(da465b87-a26f-4c12-b78a-0361428fa026)
      dp: 04 06 14 00 87 5b 46 da 6f a2 12 4c b7 8a 03 61 42 8f a0 26 / 7f ff 04 00
Boot0015  Regulatory Information    FvFile(478c92a0-2622-42b7-a65d-5894169e4d24)
      dp: 04 06 14 00 a0 92 8c 47 22 26 b7 42 a6 5d 58 94 16 9e 4d 24 / 7f ff 04 00
Boot0016  ThinkShield secure wipe   FvFile(3593a0d5-bd52-43a0-808e-cbff5ece2477)
      dp: 04 06 14 00 d5 a0 93 35 52 bd a0 43 80 8e cb ff 5e ce 24 77 / 7f ff 04 00
Boot0017  ThinkShield Passwordless Power-On Device Manager  FvFile(08448b41-7f83-49be-82a7-0e84790ab133)
      dp: 04 06 14 00 41 8b 44 08 83 7f be 49 82 a7 0e 84 79 0a b1 33 / 7f ff 04 00
Boot0018  Wi-Fi Configuration   FvFile(d3aaff0f-cb22-4792-896c-802c2e9383ba)2d004100700070000000
      dp: 04 06 14 00 0f ff aa d3 22 cb 92 47 89 6c 80 2c 2e 93 83 ba / 7f ff 04 00
    data: 2d 00 41 00 70 00 70 00 00 00
Boot0019  Reinstall Windows from Cloud  FvFile(3edbaac4-5017-4870-8cc4-721f9ef1974f)2d004100700070000000
      dp: 04 06 14 00 c4 aa db 3e 17 50 70 48 8c c4 72 1f 9e f1 97 4f / 7f ff 04 00
    data: 2d 00 41 00 70 00 70 00 00 00
Boot001A  Intel(R) MEBx FvFile(29a70110-7762-4211-ae88-fab19b7665be)
      dp: 04 06 14 00 10 01 a7 29 62 77 11 42 ae 88 fa b1 9b 76 65 be / 7f ff 04 00
Boot001B  Startup Interrupt Menu    FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479)
      dp: 04 06 14 00 f4 e6 6e f4 85 47 a3 43 92 3d 7f 78 6c 3c 84 79 / 7f ff 04 00
Boot001C  Rescue and Recovery   FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5)
      dp: 04 06 14 00 60 3f 5d 66 3e ad ad 4c 8e 26 db 46 ee e9 f1 b5 / 7f ff 04 00
Boot001D* USB CD    VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 86 70 12 96 aa 5a 78 48 b6 6c d4 9d d3 ba 6a 55 / 7f ff 04 00
Boot001E* USB FDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 6f f0 15 a2 88 30 b5 43 a8 b8 64 10 09 46 1e 49 / 7f ff 04 00
Boot001F* NVMe0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400)
      dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 00 1c 19 99 32 d9 4c 4e ae 9a a0 b6 e9 8e b8 a4 00 / 7f ff 04 00
Boot0020* USB HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 33 e8 21 aa af 33 bc 47 89 bd 41 9f 88 c5 08 03 / 7f ff 04 00
Boot0021* PXE BOOT  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 78 a8 4a af 2b 2a fc 4e a7 9c f5 cc 8f 3d 38 03 / 7f ff 04 00
Boot0022* LENOVO CLOUD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri(https://download.lenovo.com/pccbbs/cdeploy/efi/boot.efi)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ad 38 cc bb f7 ed f0 4d 95 9c f4 2a a7 4d 36 50 / 03 18 3b 00 68 74 74 70 73 3a 2f 2f 64 6f 77 6e 6c 6f 61 64 2e 6c 65 6e 6f 76 6f 2e 63 6f 6d 2f 70 63 63 62 62 73 2f 63 64 65 70 6c 6f 79 2f 65 66 69 2f 62 6f 6f 74 2e 65 66 69 / 7f ff 04 00
Boot0023* ON-PREMISE    VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri()
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ad 38 cc bb f7 ed f0 4d 95 9c f4 2a a7 4d 36 50 / 03 18 04 00 / 7f ff 04 00
Boot0024  Other CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35400)
      dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ae a2 09 0a df de 21 4e 8b 3a 5e 47 18 56 a3 54 00 / 7f ff 04 00
Boot0025  Other HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ca88c2349e7ae947beeb43038a5aeae700)
      dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ca 88 c2 34 9e 7a e9 47 be eb 43 03 8a 5a ea e7 00 / 7f ff 04 00
Boot0026* IDER BOOT CDROM   PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1)
      dp: 02 01 0c 00 d0 41 03 0a 00 00 00 00 / 01 01 06 00 00 14 / 03 05 06 00 0b 01 / 7f ff 04 00
Boot0027* IDER BOOT Floppy  PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0)
      dp: 02 01 0c 00 d0 41 03 0a 00 00 00 00 / 01 01 06 00 00 14 / 03 05 06 00 0b 00 / 7f ff 04 00
Boot0028* ATA HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 91 af 62 59 56 44 9f 41 a7 b9 1f 4f 89 2a b0 f6 / 7f ff 04 00
Boot0029* ATAPI CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354)
      dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ae a2 09 0a df de 21 4e 8b 3a 5e 47 18 56 a3 54 / 7f ff 04 00

# efivar -l | grep fw has no output.

# tree /boot
/boot
├── config-6.10.5-200.fc40.x86_64
├── config-6.10.6-200.fc40.x86_64
├── config-6.9.9-200.fc40.x86_64
├── efi
│   └── EFI
│       ├── BOOT
│       │   ├── BOOTX64.EFI
│       │   └── fbx64.efi
│       └── fedora
│           ├── BOOTX64.CSV
│           ├── fw
│           ├── fwupdx64.efi
│           ├── grub.cfg
│           ├── grub.cfg.rpmsave
│           ├── grubx64.efi
│           ├── mmx64.efi
│           ├── shim.efi
│           └── shimx64.efi
├── grub2
│   ├── fonts
│   │   └── unicode.pf2
│   ├── grub.cfg
│   └── grubenv
├── initramfs-0-rescue-2bfb4ccfc4ed4aaf92bef0b0c91a7296.img
├── initramfs-6.10.5-200.fc40.x86_64.img
├── initramfs-6.10.6-200.fc40.x86_64.img
├── initramfs-6.9.9-200.fc40.x86_64.img
├── loader
│   └── entries
│       ├── 2bfb4ccfc4ed4aaf92bef0b0c91a7296-0-rescue.conf
│       ├── 2bfb4ccfc4ed4aaf92bef0b0c91a7296-6.10.5-200.fc40.x86_64.conf
│       ├── 2bfb4ccfc4ed4aaf92bef0b0c91a7296-6.10.6-200.fc40.x86_64.conf
│       └── 2bfb4ccfc4ed4aaf92bef0b0c91a7296-6.9.9-200.fc40.x86_64.conf
├── lost+found
├── symvers-6.10.5-200.fc40.x86_64.xz
├── symvers-6.10.6-200.fc40.x86_64.xz
├── symvers-6.9.9-200.fc40.x86_64.xz
├── System.map-6.10.5-200.fc40.x86_64
├── System.map-6.10.6-200.fc40.x86_64
├── System.map-6.9.9-200.fc40.x86_64
├── vmlinuz-0-rescue-2bfb4ccfc4ed4aaf92bef0b0c91a7296
├── vmlinuz-6.10.5-200.fc40.x86_64
├── vmlinuz-6.10.6-200.fc40.x86_64
└── vmlinuz-6.9.9-200.fc40.x86_64

11 directories, 34 files
# mokutil --sb-state
SecureBoot disabled

Is this a Lenovo system with 'Boot Order Lock' turned on in the BIOS? No. BIOS Setup -> Startup -> Boot Order Lock = Off

# fwupdmgr get-history
LENOVO 21H3002EGE
│
├─System Firmware:
│ │   Device ID:          cdf9504993efe69929e860d15cf4b5edfe51012b
│ │   Previous version:   0.1.12
│ │   Update State:       Failed
│ │   Update Error:       failed to run update on reboot: expected 0.1.13 and got 0.1.12
│ │   Last modified:      2024-08-22 14:52
│ │   GUID:               96f43f55-bce3-4463-94a5-4d7954b67772
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • System requires external power source
│ │                       • Supported on remote server
│ │                       • Needs a reboot after installation
│ │                       • Reported to remote server
│ │                       • Cryptographic hash verification is available
│ │                       • Device is usable for the duration of the update
│ │ 
│ └─ThinkPad L14/L15 Gen 4 System Update:
│       New version:      0.1.13
│       Remote ID:        lvfs
│       Release ID:       55851
│       Summary:          Lenovo ThinkPad L14/L15 Gen 4 System Firmware
│       Variant:          W-BIOS Machine types: 21H1, 21H2
│       License:          Proprietary
│       Size:             28.8 MB
│       Created:          2023-08-02
│       Urgency:          High
│       Vendor:           Lenovo
│       Release Flags:    • Trusted metadata
│                         • Is upgrade
│       Description:      
│       Lenovo ThinkPad L14 Gen 4 System Firmware
│       
│       W/A for no sound from Internal Speakers when select Internal Speaker as output device with headset attached.
│       
│       Update L1415-2 EDID table following "Lenovo_EDID-format_ver54- Intel L14 L15 Gen3 Gen4 20230802.xlsx"
│       Checksum:         593f90134bf5c8dd70dc261128e447601c21745acdb910196392f74716d789b6
│     
└─Embedded Controller:
  │   Device ID:          bdabeb256aff8415c3fddae68632a65269bb3f55
  │   Previous version:   0.1.9
  │   Update State:       Failed
  │   Update Error:       failed to run update on reboot: expected 0.1.13 and got 0.1.9
  │   Last modified:      2024-08-22 15:42
  │   GUID:               5c0afb70-bd0a-4dd4-9a4c-d216544288d0
  │   Device Flags:       • Internal device
  │                       • Updatable
  │                       • System requires external power source
  │                       • Supported on remote server
  │                       • Needs a reboot after installation
  │                       • Reported to remote server
  │                       • Device is usable for the duration of the update
  │ 
  └─ThinkPad L14/L15 Gen 4 Embedded Controller Update:
        New version:      0.1.13
        Remote ID:        lvfs
        Release ID:       87532
        Summary:          Lenovo ThinkPad L14/L15 Gen 4 Embedded controller Firmware
        License:          Proprietary
        Size:             1.1 MB
        Created:          2024-02-29
        Urgency:          High
        Tested by Lenovo:
          Tested:         2024-07-22
          Distribution:   ubuntu 23.10
          Old version:    0.1.9
          Version[fwupd]: 1.9.16
        Tested by Lenovo:
          Tested:         2024-04-03
          Distribution:   ubuntu 23.10
          Old version:    0.1.12
          Version[fwupd]: 1.9.15
        Vendor:           Lenovo
        Release Flags:    • Trusted metadata
                          • Is upgrade
                          • Tested by trusted vendor
        Description:      
        Lenovo ThinkPad L14L15 Gen 4 Embedded controller Firmware-Revert Follow LPM3, add WA for IFLAG abnormal during status change
        Checksum:         7e1589fdb231d2209b3b1f023fee622b9a13237b6cdb2bf44868ddd9ec0df9df
realsobek commented 2 months ago

My colleague helped me again with remote investigation. Notebook has 'Boot Order Lock' disabled. For the record: if 'Boot Order Lock' is enabled, you see the red bold text "BootOrder is locked in firmware setup" in:

# fwupdmgr get-updates
LENOVO 21H3002EGE
│
├─Embedded Controller:
...
│ │   Current version:    0.1.9
│ │   Minimum Version:    0.1.9
│ │   Vendor:             Lenovo (DMI:LENOVO)
│ │   Update State:       Success
│ │   Update Error:       BootOrder is locked in firmware setup
...
├─System Firmware:
...
│ │   Current version:    0.1.12
│ │   Vendor:             Lenovo (DMI:LENOVO)
│ │   Update State:       Success
│ │   Update Error:       BootOrder is locked in firmware setup
...

I did not try fwupdmgr update.

'Boot Order Lock' disabled again. After preparing firmware update with fwupdmgr get-updates and rebooting notebook, pressing F12 (to open one-time Boot Menu) and running "Linux Firmware Updater", you see on screen in upper left corner:

fwupd-efi version 1.6
WARNING: Could not apply capsule update: Not Found
WARNING: Could not apply capsules: Not Found
Reset System

We tried a different notebook of same make and model (but SecureBoot on (in "Setup Mode") instead of off (in "User Mode")). All firmware updates were applied successfully in one step:

So it must be notebook-specific. The only difference was SecureBoot status. We went back to the notebook that lacks the firmware updates. Enabled SecureBoot and rebooted notebook. Fedora could not start. We reinstalled Fedora 40 Workstation to make it work again and get rid of testing configuration. Order of firmware installation testing; same versions as in initial message (result in brackets):

  1. Embedded Controller (fail) + System Firmware (fail) + DBX (220 -> 371: success)
  2. Embedded Controller (fail) + System Firmware (fail) (same message as above from manual F12 start, but we did not press F12)
  3. System Firmware (success)
  4. Embedded Controller (success)

So the SecureBoot status made a difference, but SecureBoot Mode did not. Problem solved. I leave it at your discretion to close this ticket. We ought to have notebooks of same make and model available for further testing. If no further testing is needed, you can close this ticket.